Showing 1–3 of 3 results for author: Ramli, C D P K

Detecting Incompleteness, Conflicting and Unreachability XACML Policies using Answer Set Programming

Authors: Carroline Dewi Puspa Kencana Ramli

Abstract: Recently, XACML is a popular access control policy language that is used widely in many applications. Policies in XACML are built based on many components over distributed resources. Due to the expressiveness of XACML, it is not trivial for policy administrators to understand the overall effect and consequences of XACML policies they have written. In this paper we show a mechanism and a tool how t… ▽ More Recently, XACML is a popular access control policy language that is used widely in many applications. Policies in XACML are built based on many components over distributed resources. Due to the expressiveness of XACML, it is not trivial for policy administrators to understand the overall effect and consequences of XACML policies they have written. In this paper we show a mechanism and a tool how to analyses big access control policies sets such as (i) incompleteness policies, (ii) conflicting policies, and (iii) unreachable policies. To detect these problems we present a method using Answer Set Programming (ASP) in the context of XACML 3.0. △ Less

Submitted 9 March, 2015; originally announced March 2015.

Comments: arXiv admin note: text overlap with arXiv:1206.5327

XACML 3.0 in Answer Set Programming

Authors: Carroline Dewi Puspa Kencana Ramli, Hanne Riis Nielson, Flemming Nielson

Abstract: We present a systematic technique for transforming XACML 3.0 policies in Answer Set Programming (ASP). We show that the resulting logic program has a unique answer set that directly corresponds to our formalisation of the standard semantics of XACML 3.0 from Ramli et. al. We demonstrate how our results make it possible to use off-the-shelf ASP solvers to formally verify properties of access contro… ▽ More We present a systematic technique for transforming XACML 3.0 policies in Answer Set Programming (ASP). We show that the resulting logic program has a unique answer set that directly corresponds to our formalisation of the standard semantics of XACML 3.0 from Ramli et. al. We demonstrate how our results make it possible to use off-the-shelf ASP solvers to formally verify properties of access control policies represented in XACML, such as checking the completeness of a set of access control policies and verifying policy properties. △ Less

Submitted 18 February, 2013; v1 submitted 22 June, 2012; originally announced June 2012.

The Logic of XACML - Extended

Authors: Carroline Dewi Puspa Kencana Ramli, Hanne Riis Nielson, Flemming Nielson

Abstract: We study the international standard XACML 3.0 for describing security access control policy in a compositional way. Our main contribution is to derive a logic that precisely captures the idea behind the standard and to formally define the semantics of the policy combining algorithms of XACML. To guard against modelling artefacts we provide an alternative way of characterizing the policy combining… ▽ More We study the international standard XACML 3.0 for describing security access control policy in a compositional way. Our main contribution is to derive a logic that precisely captures the idea behind the standard and to formally define the semantics of the policy combining algorithms of XACML. To guard against modelling artefacts we provide an alternative way of characterizing the policy combining algorithms and we formally prove the equivalence of these approaches. This allows us to pinpoint the shortcoming of previous approaches to formalization based either on Belnap logic or on D-algebra. △ Less

Submitted 17 October, 2011; originally announced October 2011.

Comments: Extended paper from The Logic of XACML, presented in FACS 2011 (8th International Symposium on Formal Aspects of Component Software)